Static task
static1
Behavioral task
behavioral1
Sample
2f712e57483c91dd6c96c1cf50a8b203_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f712e57483c91dd6c96c1cf50a8b203_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f712e57483c91dd6c96c1cf50a8b203_JaffaCakes118
-
Size
198KB
-
MD5
2f712e57483c91dd6c96c1cf50a8b203
-
SHA1
45a7f0a42ecf99014c526e0c639685e66c8a70cf
-
SHA256
6c266787e9ac1ff311c4836ea92b4a5a6d247e85fafe7ddd78c971ed415efad9
-
SHA512
2ef509210f1e3d277f5c88fa63dde4de0552e18f1c31844ccfb63e804dcc1a2c6d5287a1cee33741efdc4ebfbc8532d2c702835df83fc815f37e03266b3362e8
-
SSDEEP
3072:+EwUnYr3rVthxyaa8DOz0E6W+f07ldjYwebU+GRDKgpmzGE+idf:+EwNruaa8h07ldMqRDT44idf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f712e57483c91dd6c96c1cf50a8b203_JaffaCakes118
Files
-
2f712e57483c91dd6c96c1cf50a8b203_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae06e53e922885dbc235e25dea0c9c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
TerminateProcess
ExitProcess
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
HeapFree
UnlockFile
HeapAlloc
ReadFile
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringA
LCMapStringW
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalAddAtomA
SetErrorMode
GetFileTime
GetFileSize
SizeofResource
GetProcessVersion
GetVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SetLastError
GetModuleFileNameA
lstrcmpiA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
SetEndOfFile
LockFile
WriteFile
GlobalAlloc
VirtualAlloc
FlushFileBuffers
GlobalDeleteAtom
GlobalLock
SetFilePointer
SetUnhandledExceptionFilter
CreateFileA
GetCurrentProcess
SetCurrentDirectoryA
DuplicateHandle
GetLastError
lstrcpynA
MulDiv
LocalFree
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetStringTypeA
GetStringTypeW
VirtualFree
lstrcmpA
GetTempPathA
GetCurrentDirectoryA
GetFullPathNameA
DeleteFileA
GetTempFileNameA
GetProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThreadId
GetCurrentThread
user32
SystemParametersInfoA
IsDialogMessageA
SetWindowTextA
ShowWindow
wvsprintfA
LoadStringA
DestroyMenu
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
ReleaseCapture
GetDesktopWindow
WindowFromPoint
ClientToScreen
GetClassNameA
SendDlgItemMessageA
GetSysColorBrush
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
IntersectRect
InflateRect
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
PtInRect
GetWindowTextA
DefWindowProcA
CreateWindowExA
SetPropA
UnhookWindowsHookEx
SetForegroundWindow
GetPropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OemToCharA
CharToOemA
CharUpperA
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSysColor
GetSystemMenu
AppendMenuA
SendMessageA
UpdateWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScreenToClient
MapWindowPoints
GetWindowTextLengthA
GetMenuItemID
GetMenu
LoadIconA
GetForegroundWindow
GetLastActivePopup
CallWindowProcA
RemovePropA
GetDlgCtrlID
DefDlgProcA
DrawFocusRect
OffsetRect
HideCaret
UnregisterClassA
IsWindowUnicode
CharNextA
ExcludeUpdateRgn
ShowCaret
gdi32
CreateBitmap
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
IntersectClipRect
SetTextColor
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPointA
PatBlt
CreateDIBitmap
CreateCompatibleDC
BitBlt
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
shell32
DragQueryFileA
DragFinish
comctl32
ImageList_Destroy
ord17
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ